convertkit/convertkitapi

Repo bus factorcaution

All 24 recent commits came from one contributor, creating a real continuity concern. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency for an API client library.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. That is a supply-chain hygiene weakness without evidence of an exploitable workflow.